CVE-2024-2575 SourceCodester Employee Task Management System task-details.php authorization
CriticalCVSS 9.8
EPSS 0.67%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A vulnerability, which was classified as critical, has been found in SourceCodester Employee Task Management System 1.0. Affected by this issue is some unknown functionality of the file /task-details.php. The manipulation of the argument task_id leads to authorization bypass. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-257078 is the identifier assigned to this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sourcecodester Employee Task Management System | = 1.0 | No fix listed |
| oretnom23 employee task management system | = 1.0 | No fix listed |
References
- VDB-257078 | SourceCodester Employee Task Management System task-details.php authorization permissions-required technical-description vdb-entry
- VDB-257078 | CTI Indicators (IOB, IOC, IOA) permissions-required signature
- github.com broken-link exploit